What is Privilege Escalation? How Attackers Go From Limited Access to Full Control
Getting into a system is rarely the finish line for an attacker. Most of the time, that first foothold only grants limited access, a regular user account, a low-privilege web shell, something far short of full control. The next move, and often the more important one, is privilege escalation , the process of turning that small foothold into complete control over the system. Let's go through what privilege escalation actually means, the two main forms it takes, some real techniques attackers use, and how systems can actually be hardened against it. What is Privilege Escalation? Privilege escalation is the process of gaining higher-level permissions on a system than you were originally granted. In a typical attack, this happens after initial access has already been achieved, whether through a phishing email, a vulnerable web application, or a successful brute force attempt. The attacker starts with limited permissions and looks for a way to gain administrator or root-leve...